Privacy Policy

We understand that using Trust-ED Table means trusting us with sensitive and deeply personal information. Many of our members are parents navigating one of the most difficult experiences of their lives. We take that trust seriously.

This policy explains what information we collect, why we collect it, how we protect it, and your rights regarding your data. We’ve written it in plain language because we believe you deserve clarity, not legal jargon.

Account information

When you create an account, we collect your email address and a display name you choose. You can use any name you’d like — it does not need to be your real name. We also store your account preferences, including anonymous mode settings.

Profile information

You may optionally share your child’s diagnosis type and treatment phase to help us connect you with the right support spaces. This information is never shared publicly unless you choose to make it visible.

Community content

Messages you post in community rooms, direct messages, daily check-in responses, and any content you share within the app are stored to provide the community experience. Check-in data can be kept private or shared anonymously with the community — you control this choice.

Safety and moderation information

We store reports you submit, report reasons and optional details, moderation decisions, enforcement actions, and block-list relationships. We use this information to operate reporting, blocking, safety review, and appeals.

Usage information

We collect anonymous usage analytics (via PostHog) to understand how the app is used and improve the experience. This includes pages visited and feature usage, but is never linked to your community content or health information.

Payment information

If you subscribe to Trust-ED Table Premium, payment processing is handled entirely by Apple (App Store) or Google (Play Store). We never see or store your credit card number, billing address, or other payment details. We receive only a confirmation of your subscription status.

• We do not collect your real name unless you choose to share it
• We do not collect or store your location. The app includes an optional “find support groups near you” feature that reads your location once, on-device, only when you tap it — see below for details.
• We do not upload, store, hash, or match your phone contacts. The optional invite flow reads contacts on-device only if you grant permission.
• We do not access your photos or files
• We do not collect health records or clinical information
• We do not sell, rent, or trade your data to anyone — ever

Trust-ED Table includes an optional feature that helps you find eating-disorder support groups in your area. This feature is off by defaultand only uses your location when you tap “Use my location” on the Nearby Support Groups screen.

• We ask the operating system for one-time, foreground access to your approximate coordinates. We never use background location.
• Your coordinates stay on your device. They are never sent to our servers, never linked to your Trust-ED Table account, and never stored.
• If you prefer, you can skip location entirely and pick a US state, or browse every group on file.
• You can revoke location access any time from your system Settings app.

Trust-ED Table includes an optional “Invite Friends & Family” feature that lets you pick people from your device’s address book to invite into the app. This feature is strictly opt-in:

• We never request contacts permission at launch, during sign-up, or during onboarding. The permission prompt only appears after you tap “Find contacts to invite” inside the invite flow.
• If you grant permission, contacts are read on your device only, in memory, to populate the invite picker. Your address book is never uploaded, stored, hashed, or matched against other users on our servers.
• Invites are never sent automatically. When you tap a contact, we open your own Messages or Mail app with a pre-filled draft that you must review and send yourself.
• You can skip contacts entirely and use the manual share link or copy-link fallback at any time. You can revoke contacts permission at any time in your device’s system settings.

We use your information to:

• Provide and maintain the Trust-ED Table community experience
• Connect you with relevant support spaces based on your preferences
• Send you important account notifications (never marketing spam)
• Moderate content to keep the community safe and supportive, including automated screening of messages, replies, direct messages, and free-text check-in responses (see “Content moderation” below)
• Improve the app based on anonymous usage patterns
• Process your subscription if you choose to upgrade

We do not use your community content, check-in data, or personal stories for advertising, marketing, profiling, or for training third-party AI models.

Your data is encrypted in transit (TLS/SSL) and at rest. Our database uses row-level security policies, meaning users can only access their own data. Community content is only visible within the moderated spaces where it was shared.

We use Supabase for our database infrastructure, which provides enterprise-grade security, regular backups, and SOC 2 Type II compliance.

Trust-ED Table offers an anonymous mode that hides your display name from other community members. When anonymous mode is enabled, your posts and check-ins appear without any identifying information to other members. Anonymous mode does not hide activity from Trust-ED Table systems, safety logs, or authorized staff who need access for moderation, support, abuse prevention, or legal compliance.

To keep our community safe, content you submit through the app — including community posts, replies, direct messages, profile text, and free-text check-in responses — may be screened by automated moderation systems before or shortly after it is published. Content that is flagged by community members may also be reviewed by Trusted Table staff.

Automated moderation and third-party AI providers

Our automated moderation uses third-party AI service providers (currently OpenAI and Anthropic) to help detect harassment, threats, self-harm content, sexual content involving minors, pro-eating-disorder content, and other material that violates our community guidelines. When we send content to these providers, we send only the text needed to evaluate it — we do not intentionally attach your name, email, profile fields, location, or other account identifiers, and we minimize what we send to what is operationally required to perform the safety check.

Because these moderation checks run on text you choose to submit, anything you type into a message, profile field, or check-in may be processed by these providers. We ask our providers contractually not to use Trust-ED Table content to train their general-purpose models, and we use this processing only for community safety, abuse prevention, and policy enforcement — never for advertising, marketing, or user profiling.

Reports and blocking

When you report content, we store the report reason, optional details you provide, the message identifier, channel identifier, reporter identifier, and any offender identifier we can resolve. Staff may retrieve the reported message from our chat provider to review and act on the report. When you block another member, we store that block relationship so we can hide their content from your view and help prevent direct messaging between you. We do not notify a member when you block them.

Please avoid posting sensitive personal information— such as full names, phone numbers, home addresses, financial details, government IDs, or detailed medical records — in chats, check-ins, or community spaces. This protects both you and other members, and limits what may be processed by moderation providers.

Moderation records

When content is screened by automated moderation, we store an internal moderation record so that we can audit decisions, handle appeals, tune our safety systems, and enforce our Terms of Service and Community Guidelines. These records contain the action taken (allow, nudge, block, or error), the category and confidence scores returned by the moderation system, the context type (post, reply, direct message, check-in, or profile), and minimal metadata about the submission (a one-way cryptographic hash of the text and its length). We do not store the raw content of the message or human review notes in this automated moderation record.

Automated moderation can make mistakes — both false positives and false negatives. If your content is removed or your account is restricted in error, you can contact us at support@mytrustedtable.com for review.

We use the following third-party services to operate Trust-ED Table:

• Supabase — database and authentication
• Stream Chat — real-time messaging infrastructure
• OpenAI — automated content moderation (text safety classification)
• Anthropic — automated content moderation (nuanced text safety review)
• RevenueCat — subscription management
• PostHog — anonymous product analytics
• Resend — transactional email (contact form only)
• Apple / Google — app distribution and payment processing

Each of these services has their own privacy policies. We select partners who meet high standards for data protection and security.

Account deletion is currently handled through support or the delete-account request form on our website. Please contact support@mytrustedtable.com to request deletion. When we delete your account, we remove your profile information, check-in history, and saved resources. Community messages you’ve posted may be retained in anonymized form to preserve conversation context, but will no longer be linked to your identity.

If you’d like us to delete all of your data completely, contact us at privacy@mytrustedtable.com and we will process your request within 30 days.

Trust-ED Table is designed for adult parents and caregivers. We require age verification on first use and do not knowingly collect information from users under 18. The app is not intended for use by the children or teens being supported — it is a parent and caregiver support tool.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and personal data
• Export your data in a portable format
• Withdraw consent for optional data collection at any time

To exercise any of these rights, contact us at privacy@mytrustedtable.com.

We may update this privacy policy from time to time. If we make significant changes, we will notify you through the app or by email. We will never reduce your privacy protections without giving you notice and the opportunity to delete your account.

If you have questions about this privacy policy or how we handle your data, please reach out:

Email: privacy@mytrustedtable.com